Nutanix NCP-NS Certification Exam Sample Questions

NCP-NS Braindumps, NCP-NS Exam Dumps, NCP-NS Examcollection, NCP-NS Questions PDF, NCP-NS Sample Questions, Network & Security Dumps, Network & Security Official Cert Guide PDF, Network & Security VCE, Nutanix Network & Security PDFWe have prepared Nutanix Certified Professional Network & Security (NCP-NS) certification sample questions to make you aware of actual exam properties. This sample question set provides you with information about the Network & Security exam pattern, question formate, a difficulty level of questions and time required to answer each question. To get familiar with Nutanix Certified Professional Network & Security (NCP-NS) exam, we suggest you try our Sample Nutanix NCP-NS Certification Practice Exam in simulated Nutanix certification exam environment.

To test your knowledge and understanding of concepts with real-time scenario based Nutanix NCP-NS questions, we strongly recommend you to prepare and practice with Premium Nutanix Network & Security Certification Practice Exam. The premium Nutanix Network & Security certification practice exam helps you identify topics in which you are well prepared and topics in which you may need further training to achieving great score in actual Nutanix Certified Professional Network & Security (NCP-NS) exam.

Nutanix NCP-NS Sample Questions:

01. A ferry operator runs a Flow Virtual Networking load balancer session in Crew-VPC whose listener uses static IP 10.163.6.20 on subnet crew-web. The listener must move to 10.163.7.20 on subnet crew-edge in the same VPC, and two new web VMs must join the targets.
Which approach works?
a) Change only the listener IP in Update; the subnet follows the new address
b) Update the existing session's listener subnet and IP, then add the two VMs as targets in the same edit
c) Create a new session with the crew-edge listener and all the targets, then remove the old one
d) Remove every target first, then change the listener IP in Update
 
02. A government agency is assigning host IPs on virtual switch vs5, which will carry VPC east-west traffic for a four-node AHV cluster. Host primary IPs are in 10.118.20.0/24 and the backplane uses 192.168.230.0/24.
Which two practices meet the requirements for the vs5 host IPs?
(Choose two.)
a) Give each host its own /32 address, which isolates every tunnel endpoint
b) Avoid the subnet's network and broadcast addresses, and do not reuse any host primary or backplane IP on vs5
c) Put all four hosts in one subnet such as 10.118.64.0/24, with a gateway in that subnet
d) Place two hosts in 10.118.64.0/24 and two in 10.118.65.0/24, routed through a single gateway
 
03. A hospital has just upgraded Prism Central from pc.2024.1 to pc.7.3. The administrator is reviewing the custom authorization policies that give networking users access to Flow Virtual Networking subnets and VPCs.
What must be done to those policies?
a) Edit each policy's scope to use the Subnet or VPC entity type, adding a Subnet Type or VPC Type filter through the Advanced filter
b) Re-add every networking user to the Prism Admin role, then rebuild all of the policies from scratch around cluster-based scoping instead
c) Nothing; the policies are carried forward automatically as part of the upgrade
d) Delete the custom roles and recreate them, since pre-upgrade roles are not valid on pc.7.3
 
04. A hospital moved VPC east-west traffic onto virtual switch vs3, giving the hosts secondary IPs in 172.26.14.0/24. Geneve traffic flows and the monitoring server can ping every secondary IP, but SSH sessions and SNMP polling to those same IPs time out. vs3 was configured with default options.
Which two statements are correct?
(Choose two.)
a) The vs3 MTU is too large for SSH sessions, which is why only ICMP gets through
b) Setting permit_all_traffic=true would let SSH and SNMP reach those IPs
c) A Flow Network Security policy applied to the hosts is dropping SSH and SNMP on vs3
d) With permit_all_traffic left at its default of false, the secondary host IPs accept only Geneve and ICMP
 
05. A law firm's security review asks that Prism management traffic on the CVMs be kept apart from storage replication traffic between CVMs. A junior engineer proposes several approaches.
Which approach fits this requirement?
a) Raise the CVM MTU to 9000 and put replication on a jumbo-frame virtual switch
b) Move CVM traffic into a dedicated VPC with its own overlay subnet
c) Enable the optional CVM backplane network on the cluster
d) Configure a routable backplane VLAN so replication can also reach the DR site
 
06. A logistics firm builds a custom role for VDI administrators that limits access to self-owned entities; company policy forbids giving this team Super Admin, Prism Admin or any other built-in administrator role. When the administrator tries to add the AD server config entity to the role, so the team can manage the directory used by ID Based Security, Prism Central does not allow it.
How can the requirement be met?
a) Scope AD server config by category instead of by owner
b) Give the role access to all entities as well, since self-owned scoping cannot include AD server config
c) Assign the Super Admin role, because only Super Admin can hold AD server config
d) Recreate the AD server config while signed in as a VDI administrator, so the self-owned scope then covers it
 
07. A manufacturer is enabling VPCs on an AHV cluster whose hosts use vs0 for management, with the external subnet's VLAN also on vs0. The security team has no requirement to physically separate VPC traffic. A consultant recommends building a dedicated virtual switch for VPC traffic before go-live.
How should the team respond? c
a) Build it, because a separate switch for VPC Geneve traffic is mandatory
b) Build it, because VPC east-west traffic otherwise rides the external subnet's VLAN
c) Skip it; the default placement meets their needs
d) Build it, because north-south traffic always stays on vs0 and must be moved
 
08. A media company loads a Flow Network Security policy file into Prism Central with the import action. Afterwards Priya, who holds a custom role scoped to specific policies, can no longer edit them, while Marco, whose role has Full Access to flow policies, is unaffected.
What explains this?
a) Only Full Access users keep permissions when the policy file comes from a newer FNS version
b) Import revoked custom-role permissions on the imported policies
c) Import resets every non-admin user to Flow Viewer until roles are reassigned
d) Permissions carry over by policy name, so the imported policies must have been renamed
 
09. A regional bank must apply an uplink change to two multicluster virtual switches: mcvs-prod, spanning production clusters whose VMs cannot tolerate interruption, and mcvs-lab, spanning a lab cluster that can be disrupted tonight.
Which two choices are appropriate?
(Choose two.)
a) Use Quick for mcvs-prod, because a shorter change window lowers the risk to production
b) Apply the mcvs-prod change with Standard, which puts hosts in maintenance mode and migrates VMs off first
c) Use Standard for mcvs-lab, which updates every host at once to finish fastest
d) Use Quick for mcvs-lab, accepting the interruption
 
10. A university's network team wants to export IPFIX flow records from Flow Virtual Networking to its collector. The engineer holds both VPC Admin and Network Infra Admin and cannot configure IPFIX.
Who can perform this configuration?
a) A Network Infra Admin, after the underlay VLAN subnets are created
b) Any user holding both Prism Admin and Network Infra Admin
c) A VPC Admin who owns the overlay subnets to be exported
d) A user holding the Super Admin role

Answers:

Question: 01
Answer: c		 Question: 02
Answer: b, c		 Question: 03
Answer: a		 Question: 04
Answer: b, d		 Question: 05
Answer: c
Question: 06
Answer: b		 Question: 07
Answer: c		 Question: 08
Answer: b		 Question: 09
Answer: b, d		 Question: 10
Answer: d

Note: Please update us by writing an email on feedback@vmexam.com for any error in Nutanix Certified Professional Network & Security (NCP-NS) certification exam sample questions

Rating: 4.8 / 5 (38 votes)